Analysis

  • max time kernel
    91s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 12:24

General

  • Target

    a0f62c0df84f01f23aac39dcaf385e0af252d82b773ebebf2c9603d9cf7ea69c.exe

  • Size

    80KB

  • MD5

    93807c2f7705839614a0111ddceae344

  • SHA1

    0150ecb02cdaafc19865fcace04eb1da9a789f17

  • SHA256

    a0f62c0df84f01f23aac39dcaf385e0af252d82b773ebebf2c9603d9cf7ea69c

  • SHA512

    64886083c4ec6ed99f9c25961ee4a18f36a5af6e5d89ca071237aac2b45037b38117f7aeaceff2827f25a6ab346f54c0f74f5a5005279363a98d9a05a331813a

  • SSDEEP

    1536:MH4JdGNtxP7ZqD26vE4uLCPh9F72F1tB/6zSnmP4mWbsIi:emGNtxPlqtvE41hmF1tB/eSm4b

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a0f62c0df84f01f23aac39dcaf385e0af252d82b773ebebf2c9603d9cf7ea69c.exe
    "C:\Users\Admin\AppData\Local\Temp\a0f62c0df84f01f23aac39dcaf385e0af252d82b773ebebf2c9603d9cf7ea69c.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    • Suspicious use of WriteProcessMemory
    PID:2816
    • C:\Windows\SysWOW64\svchost.exe
      svchost.exe
      2⤵
        PID:5000

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2816-132-0x0000000000400000-0x000000000041D000-memory.dmp

      Filesize

      116KB

    • memory/2816-134-0x0000000000400000-0x0000000000414000-memory.dmp

      Filesize

      80KB